Added a device profile for AVM FRITZ!Box devices running FRITZ!OS 6.05 or newer. It is now possible to use VPN Tracker with VPN users configured through the FRITZ!Box web interface.

Changed the available proposals in several device profiles to encourage choosing more secure settings.

Improved usability when adding a new connection.

Version 8.0.1 (10/30/2014)

Thank you for your feedback, we've improved VPN Tracker 8:

Improved initial setup

Fixed a bug when exporting for VPN Tracker 6

VPN Tracker no longer unexpectedly terminates if the Helvetica font has been deleted from an OS X 10.9 system

Fixed edge cases when deleting the last remaining Secure Desktop

Improved artwork

Additional Bugfixes

Version 8.0.0 (10/16/2014)

Thank you for testing VPN Tracker 8 Preview!
VPN Tracker 8 is now available for OS X 10.10 Yosemite and OS X 10.9 Mavericks. You can find upgrade information on the VPN Tracker website. If you would like to try VPN Tracker 8, simply select "Demo" after upgrading.

Improved Status View
The new Status View clearly reflects what VPN Tracker is doing at each step. It even displays the most current log message right at the top, and takes you to the log if necessary. The Status View now has additional actions such as finding your Mac%u2019s IP address and taking you straight to your Mac%u2019s network settings.

Traffic Control
VPN Tracker 8 gives you even more control over your VPN. Don%u2019t want to send traffic to certain IP address or subnets over VPN? Simply exclude them! Have a Host to Everywhere VPN but only need to some addresses over VPN? Tell VPN Tracker to only send traffic to those IPs over VPN. And even if you%u2019re stuck in a situation where the local network uses the same subnet as the remote network there%u2019s a solution...

Force Traffic for the Local Subnet through VPN
If you end up in a situation where the local network is the same as the remote network of your VPN, VPN Tracker 8 can try to help you out by forcing non-essential local network traffic over the VPN.

VPN Engine Updated for OS X Yosemite
VPN Tracker%u2019s engine has been updated to work smoothly with the changes in OS X Yosemite.

Lower Energy Usage
Use your VPN all day long, even on battery power. VPN Tracker 8 uses significantly less energy than previous versions of VPN Tracker.

Streamlined Help and Log
VPN Tracker has always been well-known for its unrivaled ease of use. For VPN Tracker 8, we%u2019ve made it even easier to find just the information you need to quickly resolve common configuration errors.

Quick Install
Individual VPN Tracker users can now install VPN Tracker more quickly, without having to go through the steps of an installer.

Enterprise Installer
If you are deploying VPN Tracker in your organization, VPN Tracker 8 also ships as an enterprise installer that easily integrates with popular software rollout solutions.

Version 7.1.1 (08/28/2014)

This update includes minor bugfixes.

Version 7.1.0 (06/02/2014)

Added support for Linksys LRT214 and LRT224 Gigabit VPN routers.

The sidebar can no longer disappear unintentionally.

Fixed an issue calculating VPN Tracker's window size that could cause the application to terminate unexpectedly.

Improved display of OS X L2TP and PPTP connections for users who do not yet have an IPsec VPN set up.

Version 7.0.6 (12/18/2013)

Added support for the new version of Microsoft Remote Desktop in Secure Desktop and Network Scanner.

The "Disconnect Servers in this VPN" action is now faster and more reliable.

Fixed an issue that could prevent VPNs from connecting for users with several hundred different VPNs configured in VPN Tracker.

VPN Tracker now attempts a full reconnect when encountering certain error messages from the VPN gateway during re-provisioning.

Fixed a deadlock that could render VPN Tracker's system components unresponsive. Also added a way to terminate unresponsive system components if necessary.

Fixed an issue that could leave the network in an inconsistent state after disconnecting from a Host to Everywhere VPN.

Fixed an incorrectly displayed hostname in the Ping tool.

Improved hostnames for DHCP over VPN.

Important note for IPv6 VPN users
Due to an issue that has not been fixed as of the latest pre-release version of OS X 10.9 (GM), we advise customers with IPv6-based VPNs to defer upgrading to OS X 10.9 Mavericks until this issue has been resolved by Apple. Please contact the equinux technical support team at vpntracker@equinux.com if you need more information.

Version 7.0.4 (09/04/2013)

Fixed an issue that could cause VPN Tracker to crash when the VPN Availability Test is disabled.

Fixed a rare issue that could cause VPN Tracker to terminate unexpectedly when starting a network scan.

Fixed a rare issue that could cause the VPN Tracker system components to hang upon waking the Mac from sleep.

Connection icons are now properly updated when replacing a connection with an imported one.

Names of OS X L2TP/PPTP connections now update right away when changed in System Preferences.

Improved the selection of the default background color for Secure Desktops.

Version 7.0.0 (06/13/2013)

New Editions PRO

VPN Tracker 7 - We—ve combined the features of VPN Tracker Personal and Player Edition to create a single streamlined VPN Tracker 7 that works with any VPN setup - including those using strong encryption and multiple remote networks.

VPN Tracker 7 Pro - For power users, consultants and network administrators, VPN Tracker 7 Pro features the brand new Network Scanner, a new Condensed Layout, Accounting, Search, and of course Export and Network-to-Network connections.

Network Scanner PRO

Explore your remote network

Instantly connect to services

Automatic OS detection

Custom scan options

Accounting PRO

Automatically track your time, get paid for every minute

Add task or project comments

Export your accounting data for Numbers, Excel or as a customized CSV file

New Tools

Great Looks and Performance

If you have any questions about this update or other VPN Tracker features, please get in touch!

Thanks,Team equinux

Version 6.4.6 (06/05/2013)

Fixes a bug that prevented changing settings on the Advanced tab on Mac OS X 10.4

Resolves a rare issue that could cause all network traffic to be blocked after disconnecting a Host to Everywhere connection

If you have any questions about this update or other VPN Tracker features, please get in touch!

Thanks,Team equinux

Version 6.4.5 (11/19/2012)

Added a workaround for an issue in OS X 10.8 Mountain Lion that prevents a remote DNS server from being set for all domains.

If you received a pre-release version from our support team, you can safely update to this version. If you modified your remote DNS settings to work around the issue, you should be able to return to your previous remote DNS setup with this version.

Fixed a bug that could cause DNS search domains to be ignored with Cisco EasyVPN.

Added a workaround for VPN gateways that request RADIUS CHAP authentication but expect to perform plaintext authentication. The workaround is disabled by default and should only be enabled when instructed to do so by our technical support team.

If you have any questions about this update or other VPN Tracker features, please get in touch!

Thanks,Team equinux

Version 6.4.4 (09/21/2012)

Voucher activation now works reliably under OS X 10.8 Mountain Lion.

Added support for importing Cisco VPN Client (.pcf) connection files where settings have been prefixed with an exclamation mark.

Added a setting to ignore phase 2 delete payloads in order to prevent a rare rekeying issue with LANCOM devices.

Notes for OS X 10.8 Mountain Lion users:
There is currently a rare issue with certain configurations that use a remote DNS server for all domains. We are still working to resolve this issue with the team at Apple. Please contact our technical support team for possible workarounds.

Version 6.4.3 (08/07/2012)

Fixed a bug that could cause a previously provisioned pre-shared key to be used instead of the pre-shared key from the keychain, when you turned off SonicWALL Simple Client Provisioning.

The removal of Blowfish and CAST-128 in existing connections on OS X 10.8 Mountain Lion no longer requires a restart of VPN Tracker to take effect.

Notes for OS X 10.8 Mountain Lion users:

There is currently a rare issue with certain configurations (including Host to Everywhere topology VPN connections) that use a remote DNS server for all domains. We're working on this issue with Apple.

The Blowfish and CAST-128 encryption algorithms are not available on OS X 10.8 Mountain Lion. These algorithms continue to be available on OS X 10.7 Lion and earlier.

Version 6.4.2 (07/24/2012)

Support for the new Gatekeeper security feature in OS X 10.8 Mountain Lion

New device profiles for SonicWALL TZ 105, TZ 205 and TZ 215 gateways

Added support for NETGEAR FVS318N

You can now open Filemaker 12 items from your Secure Desktop

Improved reliability when configuring VPN Tracker to automatically open or connect at login

Known Issues with OS X Mountain Lion

Changes to algorithmsThe Blowfish and CAST-128 encryption algorithms are not available on OS X 10.8 Mountain Lion. These algorithms continue to be available on OS X 10.7 Lion and earlier. Please visit our FAQ for more details and how to check if you are currently using these algorithms.

DNSThere is currently a rare issue with certain VPN configurations that use a split DNS setup. We're working on this issue with Apple and hope to have an update out soon.

Version 6.4.1 (05/10/2012)

Connecting to VPNs at login has been changed to work reliably wih the latest versions of Mac OS X. There is now a global setting (VPN Tracker 6 > Preferences) to open VPN Tracker at login. For each individual VPN connection, there is a setting on the Actions tab to be automatically connected when VPN Tracker is launched.

Fixed a problem that could cause VPN Tracker to use the wrong certificate if only the key was changed during certificate renewal.

Cisco .pcf file import is now less picky about the case of entries.

An issue that could prevent VPN Tracker from cleaning up resources upon connection restart has been resolved.

Version 6.4.0 (03/29/2012)

Added support for importing Cisco VPN Client configuration files (.pcf files) that use group password authentication (File > Import 3rd Party Configuration). Importing files with certificate-based or mutual PSK authentication is not supported.

Added a new generic device profile for Cisco EasyVPN capable Cisco VPN gateways. This profile is suitable for all devices that support the Cisco IPsec VPN client and can be used when manually copying the settings from a Cisco VPN Client's configuration.

Improved Cisco device profiles to simplify the setup of group password based connections.

The log messages for Cisco connections and for remote identifier mismatches have been improved.

Fixed a display bug that could cause additional remote networks not to be displayed

Fixed an issue with deploying from a VPN Tracker installation that was itself installed from a deployment disk image

Improved default settings for new LANCOM connections

Changed the XAUTH password caching behavior for SonicWALL Simple Client Provisioning connections to improve compatibility with RSA SecurID and other one-time passcode systems. The new behavior may cause the XAUTH password to be requested twice during initial setup if the SonicWALL is set to "Never cache" the XAUTH password

Improved error messages for a number of rare error conditions in VPN Tracker's back-end components

Fixed a rare crash in VPN Tracker's back-end components

Improved error messages during installation

Version 6.2.3 (11/18/2010)

Added device profiles and configuration guides for Cisco Small Business (formerly Linksys) RVS4000 and WRVS4400N

Added device profiles for FRITZ!Box 7390 and 7570

Improved parsing of ASN.1 DN identifiers

Juniper device profiles now include DH group 14 and SHA-256

Added Edition Advisor to help choose the right VPN Tracker edition for your connection

Extended Authentication (XAUTH) can now also be turned off for ZyWALL device profiles

Version 6.0.0 (10/01/2009)

Secure Desktop: Structure your digital daily routine - VPN Tracker's new Secure Desktop makes it easy to organize your daily tasks while you're on the go. Just add the applications, file servers and other data that your users will need in their everyday tasks and workflows.

Minimize user error with Secure Desktop - Secure Desktop helps everyone focus on the tasks at hand and helps them to get their work done. It is no longer necessary to remember to connect your VPN before using an application or accessing a server - simply configure your Secure Desktop and VPN Tracker takes care of the rest.

Customize with Corporate Identity - Secure Desktop not only streamlines your workflow but can also become part of your corporate identity: simply customize your Secure Desktop with your company logo or corporate design.

Completely Automatic: Apple Scripts and Automator - In addition to standard items such as applications, servers and websites, Secure Desktop can be fully customized with Apple Scripts and Automator workflows. Use Secure Desktop to make even the most complex tasks simple for your users.

Organize customers and projects with multiple Secure Desktops - Every client and project is different - create multiple Secure Desktops and manage each individually. You can easily have everything neatly organized and cease to worry about users manually connecting and disconnecting to VPNs again.

Tiger, Leopard, Snow Leopard - We updated VPN Tracker under the hood to take advantage of Apple's latest operating system, Mac OS X 10.6 Snow Leopard. That will help with every connection you create: VPN Tracker 6 connects you lightning fast to the most remote of locations.

VPN Tracker now fully incorporates the latest Internet Protocol standard - IPv6. Using VPN Tracker, you are already prepared for the next generation Internet protocol today.

Control all of your VPN connections - The new VPN Tracker has been designed to both create IPsec VPN connections and control any existing Mac OS X L2TP and PPTP VPN connections. Now you have complete control of all your connections in one central location.

Simplified configuration - VPN Tracker has been vastly refined to make configuring and editing VPN connections easier and more intuitive. We have not only updated the device profiles but also substantially simplified the settings. We were also sure to include a direct link to each device's configuration guide when selecting a device. It's everything you need to know, right where it needs to be.

Improved rekeying - We have completely reworked VPN Trackers rekeying abilities to reliably re-negotiate encryption keys. Based on your security policy, you are now free to choose the lifetime of your encryption keys.

Automatic DHCP Renew - With VPN Tracker 6, expired DHCP Leases are a thing of the past. VPN Tracker now automatically renews DHCP leases over VPN, just another part in the story of uninterrupted and endless VPN connections.

Always a perfect connection - Whether you are at an airport, hotel or Internet cafe, VPN Tracker automatically tests your Internet connection to determine whether to access your VPN using IPsec passthrough or NAT-Travesal. Once tested, VPN Tracker will automatically use the preferred method for this and all future VPN connections.

End your session right - Use the "End Session" button to automatically quit applications, disconnect servers and close databases before the VPN is disconnected. This means that there is no more risk of data loss or errors from Finder, FileMaker or any other app when disconnecting.

IPsec, L2TP, PPTP in one place - VPN Tracker 6 brings all common VPN protocols into one single location. If you are a consultant supporting multiple clients with different VPNs, you'll save time and avoid headaches by being able to enable and disable all your VPN connections in a one place.

Hybrid Mode Authentication - We integrated Hybrid Mode Authentication initially so CheckPoint users could enjoy all benefits of VPN Tracker. In doing so we also wanted to adopt an upcoming standard that would be of benefit with other vendors as well, including Cisco.

Simple Client Provisioning will automatically detect your SonicWALL VPN gateway and give VPN Tracker what it needs to connect - all you need is to enter your SonicWALL's IP address, or host name, and VPN Tracker does the rest. For administrators and those looking to deploy VPN Tracker to multiple users, SonicWALL Simple Client Provisioning is now available in both VPN Tracker Professional and Player Editions.

Mode Config - Whether you are connecting to a Netgear, Juniper Networks or Lancom VPN gateway, VPN Tracker can use Mode Config to automatically obtain IP addresses and DNS settings to take the hassle out of administrating multiple VPN users.

Mobile User VPN for WatchGuard - VPN Tracker works great with WatchGuard's easy-to-configure Mobile User VPN. IP addresses and DNS settings are automatically transmitted to VPN Tracker making the rollout of VPN connections a breeze.

Cisco Easy VPN - If you are working with Cisco devices, configuration will be a snap with VPN Tracker's support for Cisco Easy VPN connections. No need to worry about configuring IP addresses, remote networks and various other settings - VPN Tracker works with your Cisco VPN gateway behind the scenes to take care of this for you.

Even more security on Snow Leopard - VPN Tracker takes full advantage of Snow Leopard's latest security features including Apple's Service Management framework.

Support for the latest hash-algorithm - As the market-leading VPN solution for Mac, VPN Tracker includes the latest security algorithms, which now includes the SHA-2 family of hash algorithms.

Alongside the existing Diffie-Hellman Groups 1, 2, and 5, VPN Tracker now also supports Diffie-Hellman Groups 14 to 18 with up to 8192 bits for key exchange.

Compatible with even more certificates - The new VPN Tracker 6 offers better certificate handling. It is now possible to use certificate authorities that contain certificates with atypical or more unusual parameters or data.

Even better protection of passwords and keys - The new VPN Tracker 6 provides even more security when handling your credentials, no matter where they're stored.

Export Secure Desktops - The new Secure Desktop in VPN Tracker 6 makes it easy to organize everything you need for working over VPN. And of course, Secure Desktops can be exported so you can provide your users a standardized environment where they'll find everything they need to get right to work.

Additional Options for Exporting Credentials - VPN Tracker can now also include Extended Authentication (XAUTH) credentials with exported connections. We have also simplified and improved the export methods for pre-shared keys.

Exporting is now more fun - VPN Tracker remembers your VPN connection's export settings. The next time you export, you don't have to configure anything. This speeds up large-scale deployments and makes configuration changes as fast as it takes to click a button.

Fixed a bug where VPN Tracker would continue to expect DNS settings from the VPN gateway, even
though Client Provisioning / Mode Config was no longer in use

It is now possible to set a custom timeout for the password dialogs (Advanced > Display credentials
prompt for ... seconds). This can be useful when RSA SecureID tokens are used and the authentication server
requests the next token, or for accessibility purposes

Pre-shared keys and Extended Authentication (XAUTH) credentials passed to the AppleScript start command are now stored in the keychain instead of in the connection. Passing one-time passwords (passcodes) as a parameter of the start command is no longer possible

Added support for hexadecimal pre-shared keys. Any pre-shared key beginning with 0x is considered to be
hexadecimal (e.g. 0x12FF34AB56CE)

Added an option to the password prompts / edit dialogs to remove stored passwords from the
keychain

To get accurate test results in cases where the local router only supports one concurrent VPN connection,
the VPN Environment Manager now asks to disconnect running VPN connections before performing its
tests

Added custom placeholders for the identifier settings for some devices to better indicate the settings they
correspond to on the device

Consolidated network access, so it is easier to approve the necessary network connections when third-
party personal firewalls are used

Fixed a bug where changes to a connection would not be saved when quitting the application right after
making the changes

Added full keyboard navigation and minor bug fixes for the device profile chooser

Better visual indication that a connection is locked and which settings are not editable

It is now possible to switch to a custom device profile from a specific device profile without losing any
settings

Improved Drag & Drop for connections

Fixed an issue where empty text fields would not display properly

Improved performance and accuracy of the traffic graph

Accidental entry of spaces in VPN gateway addresses is now prevented

Added an informational log message when the VPN gateway has requested a Perfect Forward Secrecy (PFS)
setting different from the configured setting

Reduced the number of log files created

Version 5.2.2 (05/27/2008)

Fixed an issue where VPN connections were restarted because of events from network interfaces that were
not directly related to the connection (e.g. AirPort when the connection was established over Ethernet)

The log will now display a hint when a VPN gateway supplies DNS settings to VPN Tracker but the
connection is not configured to use remote DNS

Fixed an issue with certificate-based authorization where certificates would not be exchanged properly,
resulting in an authorization failure

Fixed an issue where VPN Tracker would quit when waking up from sleep if more then 50 VPN connections
were set up in VPN Tracker

The newspaper in VPN Tracker’s Dock icon is now only displayed unfolded if at least one VPN connection is
connected

Fixed a rare issue where a network interface’s IP address was not properly retrieved

Fixed a local privilege escalation. Credit to Kevin Finisterre of Netragard for reporting this issue

Updated and extended many log hints to reflect the feedback received by our technical support team

Fixed a rare condition where a connection would remain in an unstoppable state when resolving a host
name failed

If VPN Tracker is assigned a remote DNS from the VPN gateway and “Use DNS Server for” is set to
“Automatic” VPN Tracker will now always use this DNS server as global DNS Server if connecting the VPN
renders locally configured DNS servers inaccessible

Fixed a race condition when connecting to servers using “Connect to Server” actions

The log will now display a hint when a VPN gateway supplies DNS settings to VPN Tracker but the
connection is not configured to use remote DNS

Fixed an issue with certificate-based authorization where certificates would not be exchanged properly,
resulting in an authorization failure

Fixed an issue where VPN Tracker would quit when waking up from sleep if more then 50 VPN connections
were set up in VPN Tracker

The newspaper in VPN Tracker’s Dock icon is now only displayed unfolded if at least one VPN connection is
connected

Fixed a rare issue where a network interface’s IP address was not properly retrieved

Fixed a local privilege escalation. Credit to Kevin Finisterre of Netragard for reporting this issue

Updated and extended many log hints to reflect the feedback received by our technical support team

Fixed a rare condition where a connection would remain in an unstoppable state when resolving a host
name failed

If VPN Tracker is assigned a remote DNS from the VPN gateway and “Use DNS Server for” is set to
“Automatic” VPN Tracker will now always use this DNS server as global DNS Server if connecting the VPN
renders locally configured DNS servers inaccessible

Fixed a race condition when connecting to servers using “Connect to Server” actions

Version 5.1.0 (03/17/2008)

VPN Tracker 5.1 incorporates client provisioning for WatchGuard devices. The client provisioning
functionality in VPN Tracker 5.1 is completely compatible with the current Peak- and Core product lines with
Fireware 9.x or newer

Updated the connection types for LANCOM devices to match current LCOS revisions. Mode Config ("IKE-
CFG") is now available and the default. This change applies only to new connections, or when changing the
connection type of an existing connection.

Fixed a bug where NAT-Traversal (old style) was performed incorrectly. This prevented traffic from going
through the VPN connection for a small number of devices under certain circumstances.

Added a field for entering an existing support ticket number when sending a Technical Support
Report

Switching an existing connection to a custom connection type now resets certain settings to a consistent
state

Fixed a crash on startup on Macs that are missing standard Mac OS X fonts

Fixed an issue where the on/off slider would remain disabled after a "Connect to Server" action had timed
out

Version 5.0.3 (01/28/2008)

In addition to activation using an equinux ID and password, it is now possible to activate an expired demo
version using license vouchers.

Quitting the application now executes any stop actions configured for running connections and waits until
these connections have been properly disconnected.

VPN Tracker is now more permissive when connecting to remote networks that are a supernet of the locally
configured network.

After a first time installation no administrator password will be required to activate
or de-activate a license. An administrator password will still be required for updating
VPN Tracker, migration from VPN Tracker 4, and for resolving rare error conditions.

Improved: DHCP requests are performed three times before a connection is stopped

Improved: Connection files can be imported from the "File" menu

Version 4.6.1 (04/05/2006)

Added: Support for NETGEAR FVS318v3 and FVS114 Routers

Added: Support for the equinux VPN Solution for Mac

Fixed: In rare circumstances the connection list was not handled properly

Version 4.6.0 (02/15/2006)

Added: Intel CompatibilityAdded: Support for NEGEAR FVS338 and FVX538 RoutersAdded: Support for Linksys BEFVP41 devicesAdded: Support for Astaro Security LinuxFix: Issue with NAT-T and some Juniper devices